Privacy Policy

What we store

• Your account (email, name, avatar via your sign-in provider).
• Workspaces, ventures, checklists, sparks, and files that you create.
• Usage counters (projects, storage, MCP calls) so we can enforce plan caps.
• Standard server logs (IP, user agent, timestamps) for security and debugging.

What we never do

• We never use your content to train AI models — ours or anyone else's.
• We never sell your data.
• We never share your projects with other workspaces.

Who else touches your data

Hark runs on Supabase (database, auth, storage) and Cloudflare Workers (app runtime). Payments are handled by our billing provider. That's it.

MCP and AI connections

If you connect Claude Code, ChatGPT, or another AI client via MCP, that client is acting as you. What it reads is the same as what you can read. We don't send data anywhere else on its behalf.

Connected agents and the Hark mod

Agent integrations — the Hark mod for Claude Code, MCP clients like Claude, ChatGPT, Cursor or Codex, and the Hark REST API — send Hark only what it needs to keep your project's record:

• Session events (session started, stopped or ended) and which project it was.
• The paths of files touched — not what's in them.
• Commit subjects.
• Test results (pass or fail).
• The agent's closing notes and any records it proposes, such as decisions and notes.

By design they never send file contents, diffs, your prompts, the chat transcript, or secrets such as keys and environment variables. Closing notes are free text, so the mod tries to strip anything that looks like a secret before sending. That cleaning is best effort: a secret written out in plain prose could still be sent.

Everything an agent sends is stored in your own project, visible only to the people you've given access, until you delete it. You can export or delete it at any time.

Your controls

• Export any project as a Markdown + files ZIP from the project page.
• Delete a project, a workspace, or your entire account at any time.
• Contact us at hello@harkstudio.io for data requests, security reports, or any privacy question.